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Abstract. A converter from first-order modal logics to classical higher- 
order logic is presented. This tool enables the application of off-the-shelf 
higher-order theorem provers and model finders for reasoning within first- 
order modal logics. The tool supports logics K, K4, D, D4, T, S4, and 
S5 with respect to constant, varying and cumulative domain semantics. 



1 Introduction 

First-order modal logics (FMLs) [4] have many applications, e.g., in planning, 
natural language processing, program verification, querying knowledge bases, 
and modeling communication. These applications motivate the use of automated 
theorem proving (ATP) systems for FMLs. Several new FML ATP systems, 
including two FMLtoHOL-based solutions, have recently been provided [T]. 

This paper describes the FMLtoHOL tool, which automatically converts prob- 
lems in FML, formulated in the new qmf -syntax [5 (which extends the TPTP 
f ol-syntax [7] with operators #box and #dia), into problems in classical higher- 
order logic (HOL), formulated in thf 0-syntax [6 . FMLtoHOL exploits and imple- 
ments a semantic embedding of constant domain FML in HOL |2I3| . Moreover, 
the tool extends this embedding to varying and cumulative domain semantics. 

FMLtoHOL thus turns any thf 0-compliant HOL ATP system — such as LEO- 
10 and Satallax 3 — into a flexible ATP system for FML. At present FMLtoHOL 
supports modal logics L := {K,K4,D,D4,T,S4,S5}, all with respect to constant, 
varying and cumulative domain semantics. Extending the tool to other normal 
FMLs and their combinations is straightforward. 

In the remainder the language of FML is fixed as: F, G ::— P{t\, . . . ,t n ) \ 
->F \FAG\FVG\F^G\ OF I OF | VxF \ 3xF. The symbols P 
are n-ary (n > 0) relation constants which are applied to terms t\,. . . ,t n . The 
ti (0 < i < n) are ordinary first-order terms and they may contain function 
symbols. The formula (VxOfx) =>• OWxfx is used as an example, it is referred 
to as El. In constant domain (resp. varying domain) semantics El is a theorem 
(resp. countersatisfiable) for logics L. In cumulative domain semantics El is a 
theorem for S5 and countersatisfiable for the other logics in L. 



* Supported by the German Research Foundation (BE2501/9-1 and KR858/9-1). 
3 Cf. www.leoprover.org and www.ps.uni-saarland.de/~cebrown/satallax/ 



2 Theory of FMLtoHOL 



FMLtoHOL exploits the fact that Kripke structures can be elegantly embed- 
ded in HOL [213] : FML propositions F are associated with HOL terms F p of 
predicate type p := i -> o. Type o denotes the set of truth values and type i 
is associated with the domain of possible worlds. Thus, the application (F p w L ) 
corresponds to the evaluation of FML proposition F in world w. Consequently, 
validity is formalized as vld p ^ = XF p \/w^Fw. Classical connectives like -i and 
V are simply lifted to type p as follows: ~<p^p = XF p Xw L ^Fw and V p ^ p ^ p = 
XFpXGpXw^FwV Gw). □ is modeled as n p ^ p = XF p Xw L yv L (-^Rwv VFv), where 
constant symbol R L ^ P denotes the accessibility relation of the □ operator, which 
remains unconstrained in logic K. Further logical connectives are defined as 
usual: A = XF p XG p ^F V ->G), = XF P XG P (^F V G), O = XF p ^a^F. To 
obtain e.g. modal logics D, T, S4, and S5, R is axiomatized as serial, reflex- 
ive, reflexive and transitive, and an equivalence relation, respectively. Arbitrary 
normal modal logics extending K can be axiomatized this way. 

For individuals a further base type p is reserved in HOL. Universal quan- 
tification \/xF is introduced as syntactic sugar for IIXxF, where T7 is defined 
as follows: Ilt^p^p = ATT ^ p Xw t V 'x p H xw . For existential quantification, S = 
XH^ p ^n Xx L ^Hx is introduced. 3xF is then syntactic sugar for SXxF. n-axy 
relation symbols P, n-ary function symbols / and individual constants c in FML 
obtain types p± p n -> p, p± -»• ... p n p n +i (both with pi = p for 

< i < n + 1) and p, respectively. 

For any FML formula F holds: F is a valid in modal logic K for constant 
domain semantics if and only if vldF p is valid in HOL for Henkin semantics. 
This correspondence provides the foundation for proof automation of FMLs with 
HOL- ATP systems. The correspondence follows from [2], where a more general 
result is shown for FMLs with additional quantification over Boolean variables. 

The above approach is adopted for varying domain semantics as follows: 
1. 77 is now defined as 77 = XH p ^ p Xw L "ix p exIn\]xw Hxw, where relation 
exInW p ^ t ^ Q (for 'exists in world') relates individuals with worlds. 2. The non- 
emptiness axiom Vw t 3x p exInWa;w for these individual domains is added. 3. For 
each individual constant symbol c an axiom VuvexInWcw is postulated; these 
axioms enforce the designation of c in the individual domain of each world w. 
Analogous designation axioms are required for function symbols. 

For cumulative domain semantics the axiom \/x p Vf t Vw t exInWa;i; A Rvw =>■ 
exInWxw is additionally postulated. It states that the individual domains are 
increasing along relation T?. 

3 Implementation and Functionality of FMLtoHOL 

FMLtoHOL is implemented as part of the TPTP2X tool [7J. TPTP2X is a multi- 
functional utility for generating, transforming, and reformatting TPTP problem 
files. It is written in Prolog and it can be easily modified and extended. 

The tool is invoked as "tptp2X -f thf : <logic> : <domain> <qmf-file>" 
where <logic> G {K,K4,D,D4,T,S4,S5} and <domain> G {const, vary, cumul}. 

To illustrate its use it is assumed that file El . qmf contains El in qmf -syntax: 



qmf (con, conjecture , ( 

( ! [X] : ( #box : ( f(X) )))=>( #box : ( ! [X] : ( f(X) ))))). 

"tptp2X -f thf:d: const El . qmf " generates the corresponding HOL prob- 
lem file El . thf in thf -syntasfl [6] for constant domain logic D: 

7. Include axioms for modal logic D under constant domains 

include ( ' Axioms/LCL013~0 . ax. const ' ) . 
include ( ' Axioms/LCL013~2 . ax') . 

• L 

thf (f_type , type , ( f: mu > $i > $o )). 7. type declaration for constant f 

thf (prove , conjecture , ( mvalid ® 

( mimplies ® ( mforall_ind @ " [X: mu] : ( mbox_d C (f CI ) ) ) 

<§ ( mbox_d ® ( mforall_ind @ ~ [X: mu] : ( f @ X ) ) ) ) )) . 

The included axiom hies contain the dehnitions of the logical connectives as 
outlined in Sect. 2. For example, the definition for mf orall_ind (which realizes 
II for constant domain semantics) is given in LCL013~0 . ax . const: 

thf (mforall_ind, definition, ( mforall_ind = 

( " [Phi: mu > $i > $o, W: $i] : ! [X: mu] : ( Phi ® X ® W ) ) ) ) . 

LCL013~2.ax contains the definition of the serial □ operator in logic D: 

thf (mbox_d, definition, ( mbox_d = 
( " [Phi: $i > $o,W: $i] : 

! [V: $i] : ( ~ ( rel_d @ W ® V ) I ( Phi Q V ) ) ) ) ) . 

thf (al , axiom, ( mserial ® rel_d )). 

Similar definitions are provided in the included axiom files for the other logical 
connectives and for auxiliary terms like mserial. The HOL ATP systems LEO-II 
and Satallax when applied to El . thf find a proof within a few milliseconds. 

When FMLtoHOL is called with option "-f thf :s5: vary" a modified file 
El .thf is created containing a conjecture identical to above except that mbox_- 
d is replaced by mbox_s5. Moreover, El. thf now includes different axiom files 
LCL013~0 . ax . vary and LCL013~6 . ax. The former contains a modified definition 
of mf orall_ind, which incorporates an explicit 'exists in world' condition: 

thf (mf orall_ind, definition, ( mforall_ind = 
( " [Phi: mu > $i > $o,W: $i] : 

! [X: mu] : ( ( exists_in_world @ X ® W ) => ( Phi ® X @ W ) ) ) )). 

thf (nonempty_ax , axiom , ( 

! [V : $i] : ? [X : mu] : (exists_in_world ® X @ V))). 

The latter axiom specifies the domains of existing objects as non-empty for all 
worlds worlds V. Axiom file LCL013~6.ax specifies mbox_s5 as follows: 

4 Some explanations: " is A-abstraction and ® an (explicit) application operator. ! , 
?, I, and => encode universal and existential quantification, negation, disjunction 
and implication in HOL. mu > $i > $o encodes the HOL type /i -> t -> o. mimplies, 
mf orall_ind, and mbox_d are embedded logical connectives as described in Sect. 2. 
Their denotation is fixed by adding definition axioms; see e.g. mf orall_ind below. 



thf (mbox_s5 .definition, ( mbox_s5 = 
( " [Phi: $i > $o,W: $i] : 

! [V: $i] : ( ~ ( rel_s5 W Q V ) I ( Phi V ) ) ) )) . 

thf (al , axiom, ( mreflexive rel_s5 )). 
thf (a2 , axiom, ( intransitive @ rel_s5 )). 
thf (a3, axiom, ( msymmetric <3 rel_s5 )). 

For the modified problem Satallax finds a counter model within milliseconds. 
4 Discussion and Outlook 

The FMLtoHOL has been applied and evaluated in combination with the HOL 
ATP systems Satallax and LEOTI; cf. [1 for details. In this case study the 
approach has also been compared with other, heterogeneous FML ATP systems. 
The FMLtoHOL based solution has the best coverage (and it can easily be extended 
to other modal logics and their combinations) and it is second best in overall 
performance behind the clausal connection prover MleanCoF0. 

Future work includes several optimizations of the tool, extensions for multi- 
modal logics (which it already partly supports), and further case studies. These 
case studies should evaluate the tool also in combination with other thfO- 
compliant HOL provers and model finders as outlined in TPS, Isabelle, Refute 
and Nitpick. 

A recent observation is that the HOL model finders Satallax, Refute and 
Nitpick apparently work well for constant and varying domain semantics but 
have problems to find counter models for cumulative domain semantics. 
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